Palo Alto New User ID Agent Adding to Firewall

EvanRaci — Mon, 05 Jun 2023 06:41:27 GMT

Hi All,

We want to add new User ID Agent to our Palo Alto Firewalls and remove the existing user ID Agent from Firewalls.

The reason is the current User-ID Agent is hosted on Window 2012 and we are going to decom that Window server.

We will install new user ID Agent on new Window Server 2022.

We already successfully added new User-ID Agent on Firewall and the status also showing connected. In that case can we remove the old User-ID Agent ?

Any area of impact we need to check/confirm before and after we remove old User-ID Agent from Firewalls? User-ID Agent is just to collect User to IP mapping information and didn't affect the user traffic right?

How can I check if the new User-ID Agent is really working or not via CLI or GUI?

Thank you so much , help me guide on this

Re: Palo Alto New User ID Agent Adding to Firewall

Raido_Rattameister — Mon, 05 Jun 2023 12:57:51 GMT

Device > Data Redistribution > Agents

Does new agent shows connected?

Monitor > User-ID

Do you see users being learned from new agent (Data Source column).

topic Palo Alto New User ID Agent Adding to Firewall in Next-Generation Firewall Discussions

Palo Alto New User ID Agent Adding to Firewall

Re: Palo Alto New User ID Agent Adding to Firewall